What's changed: Deepened AZ-700 Chapter 4 (ja figures; comparison tables/scenarios/FAQ/traps/deep paragraphs in all sections)
4.2Network Monitoring with Network Watcher
Understand Azure Network Watcher for network visibility and diagnostics. Troubleshoot using tools like Connection Monitor, NSG diagnostics (flow logs), IP flow verify, and next hop.
Troubleshooting networks hinges on isolating "where it breaks." Network Watcher provides tools to visualize and diagnose connectivity, routing, and NSG allow/deny.
4.2.1Network Watcher diagnostic tools
- Connection Monitor: continuously monitor reachability and latency between endpoints.
- IP flow verify: determine whether a specific source/destination/port is allowed or denied by NSGs.
- Next hop: show the next hop for a packet to isolate UDR issues.
- NSG flow logs: record allowed/denied traffic for analysis (traffic analytics). Note: NSG flow logs are being retired; migrate to VNet flow logs (with Traffic Analytics).
Common on AZ-700: continuous reachability/latency = Connection Monitor, check NSG allow/deny = IP flow verify, check route/next hop = next hop, allow/deny logs = NSG flow logs. Be able to pick the diagnostic matching "is the NSG blocking? or is it a routing issue?"
Continue reading — free sign-up
You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.